CVE-2022-50733

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-50733
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50733.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50733
Downstream
Related
Published
2025-12-24T12:22:52.651Z
Modified
2026-03-12T03:26:51.127131Z
Summary
usb: idmouse: fix an uninit-value in idmouse_open
Details

In the Linux kernel, the following vulnerability has been resolved:

usb: idmouse: fix an uninit-value in idmouse_open

In idmousecreateimage, if any ftipcommand fails, it will go to the reset label. However, this leads to the data in bulkin_buffer[HEADER..IMGSIZE] uninitialized. And the check for valid image incurs an uninitialized dereference.

Fix this by moving the check before reset label since this check only be valid if the data after bulkinbuffer[HEADER] has concrete data.

Note that this is found by KMSAN, so only kernel compilation is tested.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50733.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4244f72436ab77c3c29a6447af81734ab3925d85
Fixed
b3304a6df957cc89a0590cb505388d659bf3db4c
Fixed
7dad42032f68718259590b0cc7654e9a95ff9762
Fixed
f589b667567fde4f81d6e6c40f42b9f2224690ea
Fixed
1eae30c0113dde7522088231584d62415011a035
Fixed
b8bbae3236ab7dccc66c42bc3f7cdbcfc0786e54
Fixed
20b8c456df584ebb2387dc23d40ebe4ff334417c
Fixed
6163a5ae097bc78fa26c243fb384537e25610fd7
Fixed
adad163d1cff248a5df9f7cec50158e6ca89f33b
Fixed
bce2b0539933e485d22d6f6f076c0fcd6f185c4c

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50733.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.13
Fixed
4.9.331
Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
4.14.296
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.262
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.220
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.150
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.75
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.19.17
Type
ECOSYSTEM
Events
Introduced
5.20.0
Fixed
6.0.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50733.json"